Lucene search
+L

33397 matches found

Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•28 views

PT-2026-43608

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•30 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS6AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS6AI score0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•33 views

PT-2026-43600

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash layout.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a no...

7.1CVSS6AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•26 views

PT-2026-43598

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDevicegroups function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS6AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•29 views

PT-2026-43602

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a...

7.1CVSS6AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•36 views

PT-2026-43559

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync data24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS5.9AI score0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•30 views

PT-2026-43561

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

6.9CVSS5.9AI score0.00281EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•31 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7CVSS6AI score0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

7CVSS6AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•36 views

PT-2026-43563

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table...

7CVSS6AI score0.00239EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•43 views

PT-2026-43615

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•29 views

PT-2026-43611

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices configuration view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•34 views

PT-2026-43557

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS5.9AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•33 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

6.9CVSS6AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•34 views

PT-2026-43708

Name of the Vulnerable Software and Affected Versions IBM Cloud APM, Base Private version 8.1.4 IBM Cloud APM, Advanced Private version 8.1.4 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server affected versions not specified Description An authenticated user can cause a denial of...

6.5CVSS5.7AI score0.00402EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•46 views

IBM Cloud APM security vulnerabilities

IBM Cloud APM is an application performance monitoring and operations analysis platform provided by the American multinational company IBM. There are security vulnerabilities in the IBM Cloud APM Base Private 8.1.4 version and the IBM Cloud APM Advanced Private 8.1.4 version. These vulnerabilitie...

6.5CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•8 views

CVE-2026-3676: Improper Validation of Specified Quantity in Input

IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of the Fenced...

6.5CVSS5.8AI score0.00402EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

8.7CVSS6AI score0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder